Cisco SD-WAN Flaw Used to Plant KeyDrift Key-Stealing Malware
October 29, 2026
Cisco Talos says UAT-11473 exploited CVE-2026-20127 in Catalyst SD-WAN to install KeyDrift, malware built to copy the AES-256 keys protecting
Cybersecurity
Cisco SD-WAN Flaw Used to Plant KeyDrift Key-Stealing Malware
Cisco Talos says UAT-11473 exploited CVE-2026-20127 in Catalyst SD-WAN to install KeyDrift, malware built to copy the AES-256 keys protecting site traffic.
CISA Flags ESXi CVE-2026-41709 and Fragnesia Linux Flaw as Exploited
CISA added VMware ESXi CVE-2026-41709 and Linux kernel flaw CVE-2026-46300 to KEV; CrowdStrike says China-nexus Warp Panda used the ESXi bug as a zero-day.
Volt Typhoon’s Silent Train Relay Network Ran Four Zero-Day Attacks
Lumen's Black Lotus Labs says Volt Typhoon used a covert relay network called Silent Train to run four zero-day campaigns against hundreds of victims.
Kerio Connect Webmail XSS CVE-2026-112353 Exploited via SVG Files
Proofpoint observed attackers exploiting Kerio Connect webmail flaw CVE-2026-112353 with crafted SVG attachments to steal user credentials and mailbox contents.
FreeSWITCH Fixes Critical SIP Flaw CVE-2026-116779 Under Attack
SignalWire disclosed three critical FreeSWITCH flaws and says exploitation of the SIP MESSAGE command execution bug CVE-2026-116779 has been seen in the wild.
Dell Patches Four Unauthenticated CVSS 9.8 Data Domain Flaws
Dell advisory DSA-2026-416 fixes 48 Dell-specific PowerProtect Data Domain flaws, including four unauthenticated CVSS 9.8 bugs allowing root command execution.
Apache Kafka JWT Bypass CVE-2026-110985 Among 12 Fixed Flaws
Apache Kafka fixed 12 vulnerabilities, including CVE-2026-110985, a JWT validation bypass that lets unauthenticated attackers forge tokens for any user.
Yoba Campaign Hides XMRig Miner Behind Signed ChatGPT, Claude Files
Check Point says the Yoba campaign used fake GitHub pages for nonexistent AI apps to deliver an XMRig miner through signed OpenAI and Anthropic executables.
Fake FedEx Tax PDFs Deliver Sirius Backdoor That Survives Reset
Trellix details a Korean-language phishing campaign posing as FedEx that delivers a fileless Sirius Backdoor designed to persist through a full OS reset.
Hacktivists Leak Data on 41,000 DHS Staff, Claim Okta SSO Breach
A leak site carries internal data on more than 41,000 DHS employees and contractors. The Department of Peace claims an Okta SSO source; Okta denies ...
CISA Flags ESXi CVE-2026-41709 and Fragnesia Linux Flaw as Exploited
October 29, 2026
CISA added VMware ESXi CVE-2026-41709 and Linux kernel flaw CVE-2026-46300 to KEV; CrowdStrike says China-nexus Warp Panda used the ESXi
Volt Typhoon’s Silent Train Relay Network Ran Four Zero-Day Attacks
October 29, 2026
Lumen’s Black Lotus Labs says Volt Typhoon used a covert relay network called Silent Train to run four zero-day campaigns
Kerio Connect Webmail XSS CVE-2026-112353 Exploited via SVG Files
October 29, 2026
Proofpoint observed attackers exploiting Kerio Connect webmail flaw CVE-2026-112353 with crafted SVG attachments to steal user credentials and mailbox contents.
FreeSWITCH Fixes Critical SIP Flaw CVE-2026-116779 Under Attack
October 29, 2026
SignalWire disclosed three critical FreeSWITCH flaws and says exploitation of the SIP MESSAGE command execution bug CVE-2026-116779 has been seen
Dell Patches Four Unauthenticated CVSS 9.8 Data Domain Flaws
October 29, 2026
Dell advisory DSA-2026-416 fixes 48 Dell-specific PowerProtect Data Domain flaws, including four unauthenticated CVSS 9.8 bugs allowing root command execution.
Apache Kafka JWT Bypass CVE-2026-110985 Among 12 Fixed Flaws
October 29, 2026
Apache Kafka fixed 12 vulnerabilities, including CVE-2026-110985, a JWT validation bypass that lets unauthenticated attackers forge tokens for any user.
Yoba Campaign Hides XMRig Miner Behind Signed ChatGPT, Claude Files
October 29, 2026
Check Point says the Yoba campaign used fake GitHub pages for nonexistent AI apps to deliver an XMRig miner through
Fake FedEx Tax PDFs Deliver Sirius Backdoor That Survives Reset
October 29, 2026
Trellix details a Korean-language phishing campaign posing as FedEx that delivers a fileless Sirius Backdoor designed to persist through a
Hacktivists Leak Data on 41,000 DHS Staff, Claim Okta SSO Breach
October 29, 2026
A leak site carries internal data on more than 41,000 DHS employees and contractors. The Department of Peace claims an
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.